All data is held securely, is GDPR-compliant, and will be stored and deleted in line with government guidance. It is expected that businesses will have to keep a register of customers for 21 days.